Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

c1bff66a2c...28.exe

windows7-x64

1

c1bff66a2c...28.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c1bff66a2c33f51a02c708d412b1cf28

  • Size

    146KB

  • Sample

    240311-19c4bsab29

  • MD5

    c1bff66a2c33f51a02c708d412b1cf28

  • SHA1

    a5d135357f9d59f5727228c775b595cc83243909

  • SHA256

    08de37cd178bcb60547a892bc3ca9287aef327bf9dcee24de8b5a9b9eae67e4d

  • SHA512

    4f9eea562a693be2bbd385a78513e0737f70c31e3c35db4e15ee694a72e0489fd4817adfb76275200a86ae32655eb219ba332513f490329f6fefd30f178fce8b

  • SSDEEP

    3072:12G3yGihjYA/SYE15HvvocVz0x3wzF0MK:MG3y2AqY2Hvw+0JwOT

Score
9/10
evasion

Malware Config

Targets

    • Target

      c1bff66a2c33f51a02c708d412b1cf28

    • Size

      146KB

    • MD5

      c1bff66a2c33f51a02c708d412b1cf28

    • SHA1

      a5d135357f9d59f5727228c775b595cc83243909

    • SHA256

      08de37cd178bcb60547a892bc3ca9287aef327bf9dcee24de8b5a9b9eae67e4d

    • SHA512

      4f9eea562a693be2bbd385a78513e0737f70c31e3c35db4e15ee694a72e0489fd4817adfb76275200a86ae32655eb219ba332513f490329f6fefd30f178fce8b

    • SSDEEP

      3072:12G3yGihjYA/SYE15HvvocVz0x3wzF0MK:MG3y2AqY2Hvw+0JwOT

    Score
    9/10
    evasion

    • Looks for VirtualBox Guest Additions in registry

      evasion

    • Modifies RDP port number used by Windows

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks